🏠 Kenya BnB Privacy Policy

Last updated: 7 May 2026  ·  Effective date: 7 May 2026

Kenya BnB ("we", "us", "our") operates the Kenya BnB mobile application ("App"). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the App, and explains your rights under Kenya's Data Protection Act 2019, the EU General Data Protection Regulation (GDPR), and applicable Google Play policies.

By downloading or using the App you agree to this policy. If you do not agree, please uninstall the App and contact us to delete your data.

1. Who We Are

We are the data controller responsible for your personal information. Our backend infrastructure is hosted on Supabase (Frankfurt, EU), which acts as a data processor on our behalf under a Data Processing Agreement.

2. What We Collect

Data Type	What specifically	Who provides it	Why we need it
Account data	Full name, email address, phone number, role (guest/host)	You, at registration	Create and manage your account
Listing data	Property title, description, location, price, photos, contact number	Hosts, when creating listings	Display property listings to guests
Location data	Precise GPS coordinates (lat/lng), bearing, speed	Your device, only during active navigation	Provide turn-by-turn navigation to properties
Photos / media	Images uploaded by hosts for property listings	Hosts, when creating or editing listings	Display property photos to potential guests
App activity	Listings viewed, searches performed, favourites saved	Automatically, as you use the App	Personalise the feed and improve the App
Advertising ID	Android Advertising ID (AAID)	Your device, via AdMob SDK	Serve relevant advertisements (can be opted out)
Device info	Device model, OS version, crash logs	Automatically, on crash	Fix bugs and improve stability

What we do NOT collect: payment card details (we do not process payments), precise location when the App is closed and no navigation session is active, contacts from your phone, or call logs.

3. How We Use Your Data

• Provide the service: create accounts, display listings, enable host-guest contact.
• Navigation: use your real-time GPS position to calculate and display turn-by-turn directions. Location is not stored after your navigation session ends.
• Safety & moderation: review host listings for policy compliance within 48 hours of submission.
• Advertising: serve AdMob ads in the Home feed, Search results, and at natural pause points. You can opt out of personalised ads via Android Settings → Google → Ads.
• Analytics: understand how guests discover properties and how hosts manage listings so we can improve the App.
• Legal compliance: retain records as required by Kenyan law.

We do not sell your personal data. We do not share it with third parties other than as described in Section 4.

4. Who We Share Data With

We may disclose data to law enforcement or regulatory authorities if required to do so by a valid legal order under Kenyan law.

5. Location Data — Detailed Notice

The App collects precise location data only in the following circumstances:

• Active navigation session: while the Navigation screen is open or the Navigation Foreground Service is running (indicated by the persistent notification "Navigating to…"). Location updates every 1.5 seconds.
• Listing location picker: when a host pins their property on the map during listing creation. A single location reading is taken and stored as the listing's coordinates.

Location is not collected when you are browsing the feed, viewing listing details, or when the App is in the background without an active navigation session.

Navigation location data is processed in-memory on your device and is not transmitted to our servers. The route is fetched once from the OSRM server (see Section 4) but your moment-to-moment GPS position is never sent anywhere.

You can revoke location permission at any time in Android Settings → Apps → Kenya BnB → Permissions → Location.

6. Data Retention

Data type	Retention period
Account data (name, email, phone)	Until you request account deletion, then deleted within 30 days
Listing data and photos	Until the host deletes the listing or requests account deletion
Navigation location data	Not stored — processed in-memory only, discarded when session ends
App activity (searches, views)	90 days, then anonymised and aggregated
Crash logs	30 days
Advertising ID	Controlled by Android OS and Google — reset via Android Settings

7. Your Rights

Under the Kenya Data Protection Act 2019 and (where applicable) GDPR, you have the right to:

To exercise any right, email privacy@kenyabnb.co.ke or evance_ochiel@yahoo.com with "Data Rights Request" in the subject line. We will respond within 30 days. We may ask you to verify your identity before processing the request.

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) Kenya at www.odpc.go.ke.

8. Security

• All data transmitted between the App and our servers uses TLS 1.3 encryption.
• Data at rest in Supabase Postgres is encrypted using AES-256.
• Authentication is handled by Supabase Auth with bcrypt-hashed passwords.
• Database access is controlled by Row-Level Security (RLS) policies — users can only read and write their own data.
• Uploaded images are stored in private Supabase Storage buckets with signed URLs for access.
• We conduct security reviews before each major release.

No system is 100% secure. In the event of a data breach affecting your personal information, we will notify you within 72 hours as required by law.

9. Children's Privacy

Kenya BnB is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us immediately at privacy@kenyabnb.co.ke or evance_ochiel@yahoo.com and we will delete the account.

10. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will notify you via an in-app notification at least 14 days before the change takes effect. The updated policy will always be available at www.kenyabnb.co.ke/privacy.

Your continued use of the App after the effective date constitutes your acceptance of the updated policy.

11. Contact Us